Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3138353a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          D/PeH40Zd/aZN+vj+mVI4Ms20wB41d5krZ2q/ad7+LA=
Subject key identifier:   61:F1:EA:43:5C:B5:16:A9:48:20:0E:61:24:BD:BC:8B:8F:AD:EA:84
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       288246C0DB66879F0B7BB81C6F521BFCC6A4339B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 02 Apr 2026 13:35:54 +0000
ROA not before:           Thu 02 Apr 2026 13:30:54 +0000
ROA not after:            Thu 01 Apr 2027 13:35:54 +0000
asID:                     13213
IP address blocks:        2602:ff62:185::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:82:46:c0:db:66:87:9f:0b:7b:b8:1c:6f:52:1b:fc:c6:a4:33:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:54 2026 GMT
            Not After : Apr  1 13:35:54 2027 GMT
        Subject: CN=61F1EA435CB516A948200E6124BDBC8B8FADEA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:b4:2f:91:f3:e1:e8:53:17:6e:34:50:ed:
                    09:01:6c:71:ee:10:0d:91:bd:25:6b:00:19:68:84:
                    81:1c:a4:a8:77:e7:48:09:3d:42:84:4e:ee:e1:41:
                    76:af:df:6a:dd:8f:cf:52:ae:39:7c:5e:aa:17:76:
                    d5:36:0e:7a:70:5c:f9:0e:55:9d:cf:2b:a5:79:d2:
                    fb:d6:81:e9:4c:bb:14:d4:8f:6d:4f:da:25:8b:ab:
                    fe:b2:fa:43:a1:7a:c9:ca:3a:a1:6a:66:63:21:73:
                    74:c3:48:0d:ea:6b:37:f1:f4:e1:f3:7c:14:a6:4b:
                    3e:52:90:d5:bb:de:7a:7d:4b:47:60:2e:4d:a7:9c:
                    be:ab:5f:ef:c7:c5:8b:66:ae:b0:af:28:a0:83:61:
                    0a:11:70:c1:b9:cb:d5:ea:31:f7:ff:9d:f9:a8:a9:
                    b2:b3:49:41:f1:21:32:3c:b8:f3:e1:d5:7b:d1:4b:
                    66:dd:e8:92:f1:b5:c9:a8:63:38:f0:e9:b4:66:12:
                    0c:56:0f:e7:68:d8:59:01:35:33:46:3c:ef:df:54:
                    93:f5:9f:f6:a0:ac:fa:de:43:ef:13:49:82:a1:14:
                    17:66:e1:f4:b0:54:01:11:c3:0c:33:b0:06:0a:0c:
                    f7:97:4b:fb:f1:ef:07:11:e6:6f:96:7a:67:fc:8a:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F1:EA:43:5C:B5:16:A9:48:20:0E:61:24:BD:BC:8B:8F:AD:EA:84
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:da:fc:ce:6b:46:64:79:22:d6:a1:20:54:1e:6a:f1:6b:b1:
         15:0d:13:0c:29:82:e4:fb:a6:44:4f:ff:1f:8c:f6:9b:6b:6c:
         84:b8:14:32:23:7d:fd:d5:31:ef:93:3b:6b:3e:9e:39:52:44:
         3e:f0:a6:0f:d7:43:ef:73:f9:6e:1a:0e:c8:99:29:87:62:13:
         84:6d:75:11:63:43:62:2e:df:88:eb:66:3f:f3:45:35:ac:19:
         e2:91:28:8b:6b:14:ea:7b:fe:e7:87:82:bd:ad:87:6e:fa:49:
         5f:f2:9c:46:b8:35:18:8f:6c:c9:b7:d9:38:56:d7:eb:c0:9b:
         92:e1:fa:a8:64:45:06:a7:8d:37:48:c4:8b:6b:6c:bb:7d:18:
         02:d4:a5:58:74:f6:d8:e9:9f:74:63:24:e0:06:9c:c2:89:f1:
         aa:9f:e1:09:a8:b2:c2:13:d7:23:08:cf:1e:9a:d0:cf:6d:35:
         70:40:32:4d:ae:5c:20:75:b1:c3:0a:6f:c0:2b:99:bc:43:e2:
         60:2d:07:0b:c8:5e:ef:f6:3f:a7:37:7c:c9:54:5b:e2:76:78:
         73:91:f5:a7:c6:c4:68:ed:24:90:b4:19:a7:6e:2f:39:c6:65:
         17:d6:a2:4e:42:e0:d3:14:6b:e8:e5:dc:99:47:39:38:a3:00:
         6d:19:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:39 2026 by rpki-client